Last updated: April 14, 2026.
We, at 3APPS, take your privacy and the protection of your data seriously and are committed to guaranteeing your rights. For this reason, we have prepared this document to explain how we treat your personal data, what your rights are, and how You, the User, can exercise them.
This Privacy Notice applies to the BeFit Platform (“Platform” or “BeFit”), offered by 3APPS SOLUTIONS AND ADVISORY LTDA, a private legal entity, registered under CNPJ No. 51.329.151/0001-29 (“3APPS” or “Company”), which operates, among other activities, in providing personalized physical exercise training using technology to offer workout plans adjusted to the profile, objective, and level of each User.
3APPS, as the controller of personal data, is committed to protecting your privacy and your personal data and, through this Privacy Notice, we will present our privacy and security practices implemented during the processing of personal data across all our products.
This Notice also informs how You can exercise your rights regarding these personal data processing activities. By declaring awareness of this document, You consent, freely and expressly, to your data and information being collected, stored, processed, and shared according to the rules set forth in this Privacy Notice.
1. Why do we process your personal data?
BeFit is an application whose objective is to allow the User to have an individualized physical exercise program, whether for weight loss, muscle mass gain, or physical conditioning, with structured organization of exercises, division by muscle groups, load progression, and continuous monitoring of evolution.
Our purpose is to offer, within our range of services focused on the creation and management of personalized physical workouts, the best possible experience based on a personalized and efficient solution.
Because of this, we need to know our Users well in order to provide the best possible experience on our Platform.
2. What is needed to understand this privacy notice?
In order to provide a better and greater understanding of the terms used in this Notice, we have listed below some concepts and definitions that will be used throughout this document. These are concepts and definitions used by Law No. 13,709/2018, the General Data Protection Law (LGPD), and other regulations on privacy and data protection.
When these terms are used, they will begin with a capital letter:
| Term | Definition |
| Notice | It is this document: Privacy Notice. |
| Data Controller | Natural or legal person, under private or public law, responsible for decisions regarding the processing of personal data. This is 3APPS SOLUTIONS AND ADVISORY LTDA. |
| Data Processor | Natural or legal person, under public or private law, who performs the processing of data on behalf of the controller. |
| Personal DataArt. 5º, I, LGPD | Any information related to a natural person that is capable of identifying that person or making their identification possible. Examples of personal data that may allow the identification of a natural person: name, email, etc. |
| Sensitive Personal DataArt. 5º, II, LGPD | Information about racial or ethnic origin, religious conviction, political opinion, affiliation with a union or a religious, philosophical, or political organization, data regarding health or sexual life, genetic or biometric data, when linked to a natural person, which, by its very nature, could be used for discriminatory and illicit purposes against a specific natural person. |
| ProcessingArt. 5º, X, LGPD | Any form of use we can make of your Personal Data, including, but not limited to, the following activities: collection, storage, consultation, use, sharing, transmission, classification, reproduction, deletion, and evaluation. |
| Data SubjectiveArt. 5º, V, LGPD | The natural person to whom the data refers. |
In addition to these definitions used by the LGPD, the terms below have the following meanings:
| Term | Definition |
| Cookies | Small text files or fragments of information sent by the server to the Users’ browser, aiming to improve the quality of services, platform usability, and the storage of User preferences, making navigation more efficient and secure. |
| Users | Any and all natural or legal persons who accept the conditions for the provision of services provided by 3APPS, understanding the inherent rights and obligations. |
| Partners | Companies that provide services and may have partnership agreements signed with 3APPS to offer products and services to Users who wish to contract them. |
| Third-Party Sites or Third-Party Services | Means that the Platform site may contain links to other sites and online services from third parties, and your use of such sites and services is subject to the Terms of Use and Privacy Notice of such third parties. |
3. What type of personal data do we process and for what purposes
The types of Personal Data we process are those that concern the Services we provide, that is, data related to the execution of our services to facilitate the use of the application for the creation and management of personalized physical workouts, with a library of demonstrated exercises (including purely explanatory videos), control of sets, repetitions, rest time, and technical notes, for example.
We process data of the Users of our Services. Below, we list some situations in which we may process your Personal Data, within the context of the relationship You maintain (or may maintain) with us.
| Data Types | Data | Purpose | Legal Grounds |
| Data for workout personalization (anonymized) | Gender, experience level with resistance training, training frequency, goal, training location (gym or at home), body weight, body region to focus on, height, target weight, other training information. | Personalize the workout according to the user’s needs and preferences. | Performance of Contract; Legitimate Interest; and Regular Exercise of Rights in Judicial or Administrative Proceedings. |
| Personal Registration Data (Optional) | Full name, age, gender. | User identification; support and execution of contracted services and products; and age verification. | Performance of Contract; Legitimate Interest; and Regular Exercise of Rights in Judicial or Administrative Proceedings. |
| Contact Data | E-mail. | Maintain contact with the User whenever necessary, including sending communications related to the account, password recovery, operational information, and Platform updates. | Performance of Contract; Legitimate Interest; and Regular Exercise of Rights in Judicial or Administrative Proceedings. |
| Location Data | Geolocation. | Generate approximate geolocation. | Performance of Contract; and Legitimate Interest. |
| Financial Data | Data related to the payment method chosen by the User; data necessary for subscription management. | Subscription management. | Performance of Contract; Legitimate Interest; and Regular Exercise of Rights in Judicial or Administrative Proceedings. |
| Platform Usage | IP Address (Internet Protocol, network device identification number) with date and time information, IP origin, accessed features, click information, among others; device type, browser, operating system, pages accessed, time spent, and approximate access region*. The platform also records operational data such as access logs, login attempts, actions performed in the panel, and navigation metrics. | Fraud prevention; and usage data for analysis to generate improvements in service. To enable the development, offering, and improvement of our products, services, content, and advertising within or outside the platform. | Performance of Contract; and Legitimate Interest. |
| Tipos de Dados | Dados | Finalidade | Hipóteses Legais |
| Data for workout personalization (anonymized) | Gender, experience level with resistance training, training frequency, goal, training location (gym or at home), body weight, body region to focus on, height, target weight, other training information. | Personalize the workout according to the user’s needs and preferences. | Performance of Contract; Legitimate Interest; and Regular Exercise of Rights in Judicial or Administrative Proceedings. |
| Personal Registration Data (Optional) | Full name, age, gender. | User identification; support and execution of contracted services and products; and age verification. | Performance of Contract; Legitimate Interest; and Regular Exercise of Rights in Judicial or Administrative Proceedings. |
| Contact Data | E-mail. | Maintain contact with the User whenever necessary, including sending communications related to the account, password recovery, operational information, and Platform updates. | Performance of Contract; Legitimate Interest; and Regular Exercise of Rights in Judicial or Administrative Proceedings. |
Location Data | Geolocation. | Generate approximate geolocation. | Performance of Contract; and Legitimate Interest. |
| Financial Data | Data related to the payment method chosen by the User; data necessary for subscription management. | Subscription management. | Performance of Contract; Legitimate Interest; and Regular Exercise of Rights in Judicial or Administrative Proceedings. |
| Platform Usage | IP Address (Internet Protocol, network device identification number) with date and time information, IP origin, accessed features, click information, among others; device type, browser, operating system, pages accessed, time spent, and approximate access region*. The platform also records operational data such as access logs, login attempts, actions performed in the panel, and navigation metrics. | Fraud prevention; and usage data for analysis to generate improvements in service. To enable the development, offering, and improvement of our products, services, content, and advertising within or outside the platform. | Performance of Contract; and Legitimate Interest. |
*Whenever possible, we will keep this data in an anonymized format, meaning your identification will not be possible. Identification will only occur through the User’s interest in providing their personal identification data in the Edit Profile tab and during onboarding on the Platform, should the User wish to perform their login.
We may also, during application access, make use of technologies that collect other data considered personal, such as Cookies.
Cookies are files that temporarily store what you visit on the internet. They help you remember your preferences and personalize your access, making your navigation safer, faster, and more pleasant. We use Cookies and may collect Personal Data through them, as they are important tools for the operation of our services.
Cookies can be of 4 types: strictly necessary, performance, functionality, and advertising. Thus, we use Cookies primarily to remind you of your preferences, allow your navigation to be more efficient and fast, improve interactivity when accessing our site, improve the frequency of our communication with You, and offer personalized content. You can, at any time, configure your browser to not accept Cookies or to notify you when a Cookie is being sent. However, if you choose to refuse or remove Cookies, the availability and functionality of 3APPS services may be affected.
Some Cookies, called necessary, which are essential to the website’s operation, cannot be deactivated, whether to guarantee the functioning of the web page or due to legal requirements arising from the Brazilian Civil Framework of the Internet (Law 12,965/2014). They are:
- Session data, navigation, and accessed pages;
- Domain, initial date and time record (first visit), last date and time record (last visit), current date and time record (current visit), and number of sessions;
- Navigation behavior;
- Navigation history;
- Distinction of Users;
- First navigation;
- Registration and navigation data;
- Registration data through the IP address; and
- Data for adjustment and optimization of navigability.
4. With whom we share your personal data?
To carry out our activities in the best possible way, we operate in partnership with other organizations. We work in partnership with these companies because they are specialized in certain services (such as Information Technology and Cloud Storage, among others), which improves the quality of the service provided.
Partners and suppliers: we share personal data with our Partners and suppliers, such as information technology companies, among others. These service providers have access to your personal data only for the execution of their activities, using only the data necessary for the execution of such activities, and we always work with companies that have privacy policies aligned with ours, as described below:
| Parceiro/Fornecedor | Finalidade |
| Strapi (https://strapi.io/) | Content management system for exercise libraries and training content. Strapi does not store user personal data. |
| Google Firebase, including Authentication, Cloud Firestore, Remote Config, Crash Reporting, Performance Monitoring, Cloud Messaging, and related infrastructure components. | These services support user authentication, secure data storage, application stability, performance optimization, and system integrity. These providers process data exclusively to provide technical infrastructure and functionality and comply with all legal guidelines applicable to the processing of personal data. |
| Tenjin (https://tenjin.com/) | For marketing attribution and measurement on iOS. Tenjin processes limited attribution data and device identifiers to provide insights into campaign performance and marketing analytics. |
| Google Analytics 4 | Used to measure application usage patterns, feature performance, and aggregate behavioral metrics. |
- Public authorities: we may share personal data with public authorities through a court order, a request from a competent authority or supervisory body, or to defend the rights of 3APPS;
- Other recipients: we may share personal data with other recipients, provided we have obtained your specific consent or when disclosure is necessary to comply with a legal or regulatory obligation.
- Advertising Platforms: we may run user acquisition campaigns through advertising platforms such as Meta Ads, TikTok Ads, Google Ads, and Apple Ads. These platforms may receive attribution signals or limited advertising identifiers, as necessary, to measure campaign performance and optimize advertising efficiency, subject to user consent when required by applicable law.
No health data or sensitive integration information is shared with advertising platforms.
We reserve the right to share Personal Data whenever such a measure is necessary to comply with a legal or regulatory obligation, for the execution and guarantee of compliance with our Terms of Use, as well as for the protection of the rights and interests of 3APPS, its employees, partners, and clients.
Any sharing of information is done strictly to the extent necessary and following rigid security and confidentiality standards, as well as other privacy protection laws and regulations, always respecting and ensuring that third parties respect the confidentiality of your information.
5. Your rights regarding your personal data
The General Data Protection Law (LGPD) guarantees You various rights, as the personal data belongs to you. We are committed to and concerned with your privacy and personal data protection and, for this reason, we list your rights below, as ensured by the Law.
| Your Rights | Explanation |
| 1. Confirmation and Access | You may request confirmation from us regarding the existence of processing of your Personal Data so that, if confirmed, You may access them, including by requesting copies of the records we have about You. |
| 2. Correction | You may request the correction of your Personal Data if they are incomplete, inaccurate, or outdated. |
| 3. Anonymization, blocking, or elimination | You may request, through our service channels indicated in item 12: i) the anonymization of your Personal Data, so they can no longer be related to You and, therefore, cease to be Personal Data; ii) the blocking of your Personal Data, temporarily suspending the possibility of us processing them for certain purposes; or iii) the elimination of your Personal Data, in which case we must delete all your Personal Data without the possibility of reversal. |
| 4. Information about sharing | You have the right to know which public and private entities the Company performs shared use of your Personal Data with. Above, in topic 4 of this Notice, there is an indication of our relationships with third parties that may involve the sharing of Personal Data. In any case, if You have questions or want more details, You have the right to request this information from us. Depending on the case, we may limit the information provided to You if its disclosure would violate intellectual property or our business secrets. |
| 5. Information on the possibility of not consenting | You have the right to receive clear and complete information about the possibility and consequences of not providing consent when it is requested by the Data Controller. Your consent, when necessary, must be free and informed. Therefore, whenever your consent is requested, You are free to deny it – in these cases, it is possible that some services cannot be provided. |
| 6. Withdrawal of consent | If You have consented to any purpose for processing your Personal Data, You can always choose to withdraw your consent. However, this will not affect the lawfulness of any Processing carried out prior to the withdrawal. If You withdraw your consent, it is possible that we may be unable to provide You with certain services. |
| 7. Opposition | The LGPD authorizes, in some situations, the processing of Personal Data even without your consent or a contract. In these situations, we will only process your Personal Data if we have legitimate reasons to do so, such as when it is necessary to ensure the security of our application. If You do not agree with any purpose of processing your Personal Data, You may present an opposition, requesting the interruption. |
| 8. Review of automated decisions | You may request that decisions made automatically and that affect your rights be reviewed. |
| 9. Data portability | The right to transfer data to another service or product provider, observing the rules of the National Data Protection Authority (ANPD). |
If you have any questions, You may contact our Data Protection Officer (DPO) through the official channels, as per item 12 of this Notice.
6. Personal data retention period
We maintain your personal data only for the time necessary to fulfill the purposes for which they were collected, unless there is any other reason for their maintenance, such as compliance with legal, regulatory, or contractual obligations, among others permitted by law. When there is no longer a purpose for maintaining the data, they will be deleted or anonymized.
We always perform a technical analysis to determine the appropriate retention period for each type of Personal Data collected, considering its nature, the necessity of collection, and the purpose for which it will be processed, as well as any retention needs for the fulfillment of obligations or the protection of rights.
6.1. Importante Notices
For your security, whenever You submit a request to exercise your rights, we may request some information and/or complementary documents so that we can prove your identity, seeking to prevent fraud. These data will be used only for the purpose of confirming the identity of the holder.
In some cases, we may have legitimate reasons to refuse a request to exercise rights. These situations include, for example, cases where a disclosure of specific information could violate intellectual property rights or business secrets of the Company or third parties.
If You have any questions about these points or other issues regarding your rights, feel free to contact us through the official channels, as per item 12 of this Notice.
This Privacy Notice must be read and interpreted in conjunction with the Terms of Use applicable to the services contracted by You.
7. How we protect your personal data – security
Our responsibility is to take care of your Personal Data and use it only for the purposes described in this Notice. To ensure your privacy and the protection of your Personal Data, we adopt the technological resources and administrative measures necessary to guarantee the security of all data processed by us.
We adopt clauses and terms related to the Protection of Personal Data with our partners and clients to ensure that they have, at least, the same concerns and care regarding the privacy and protection of clients’ personal data.
We strive to protect your privacy and your personal data by adopting technical, administrative, and organizational security measures to prevent unauthorized access, destruction, loss, alteration, or any other form of irregular or illicit processing.
We use tools to identify and prevent vulnerabilities in our systems and maintain strict control over access to personal data, where only authorized persons can access them. The security measures taken seek to inhibit and prevent problems involving the processing of provided data, highlighting that there are no 100% secure and inviolable systems, which is why we are not responsible for illicit access, as well as for acts of third parties that succeed in collecting or using, by any means, registration data and information made available on the platform by the User.
UNDER NO CIRCUMSTANCES DO WE SELL, RENT, OR IMPROPERLY SHARE THE PERSONAL DATA WE PROCESS.
To maintain a secure environment, your collaboration is essential. If you identify any sign of a security breach or suspect irregular activities involving your data, please contact us immediately through the official channels indicated below.
We are committed to acting with transparency and readiness to ensure the protection of your information.
8. Do we perform international data transfers?
3APPS performs international data transfer, considering that its database in cloud systems is located in Brazil and the United States. 3APPS maintains specific clauses to ensure correct processing, aligned with Brazilian laws and regulations.
9. Data of children and adolescents
3APPS does not target its Platform to a child audience; therefore, we do not intentionally collect information from children under 16 years of age. If parents or legal representatives believe that their children have sent us their personal data, we recommend contacting us via email: [email protected].
If you are 16 years of age and under 18 years of age and intend to use our products and services, you must review this Privacy Notice, as well as the Terms of Use, together with your parents or legal guardians to ensure that you have understood all the conditions set forth herein.
The processing of personal data of minors will be carried out in compliance with applicable legislation, especially the Brazilian General Personal Data Protection Law and the Brazilian Digital ECA (Law 15,211/2025), always observing their best interest.
Parents or legal representatives may contact us at any time for clarification or to exercise the rights provided by current legislation.
10. Artificial intelligence
3APPS may use Artificial Intelligence (AI) technologies in its services and products, exclusively to enhance the provision of its services and optimize the experience of its clients, such as, for example, making the BefitIA virtual assistant available to paid plan subscribers. We confirm our commitment to secure development in accordance with the principles established by Brazilian legislation and best market practices, ensuring responsible use and safeguarding the security, protection, and privacy of our users.
The use of BefitIA can be canceled at any time upon request to our service team. If you choose to cancel its use, some functionalities of our Platform may become unavailable. Consult our service team for more details.
11. Contact
If You believe that your Personal Data has been processed in a manner inconsistent with this Notice or with your choices as a Data Subject, or if You have questions, comments, or suggestions related to this document and the way we process your Personal Data, please contact us.
Data Protection Officer: CLARET LAURENTE SABIONI
Contact Email: [email protected]
12. Changes to this privacy notice
As we are always seeking to improve our services and the way we operate, this Privacy Notice may undergo certain updates to reflect the improvements made and any increments to our services.
3APPS reserves the right to modify this Notice at any time, without the need for the User’s prior consent. However, we guarantee that any relevant change will be communicated, allowing for your analysis before it takes effect.
If the User does not agree with the modifications, they may choose not to continue using our services, as remaining in use will imply acceptance of the new terms.
13. Version control
| UPDATE DATE | UPDATE CONTROL |
| April 2026 | Publication of the new version of the Privacy Notice. |
